Back to Database
Status published
Medium
CVE-2004-0580
DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers,...
Vulnerability Description
DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0580
Credits & Attribution
No credits recorded in the NVD database.
References
- http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=832&p_%20%5Ccreated=1086294093&p_sid=pU1X1idh&p_lva=&p_sp=cF9zcmNoPSZwX3NvcnRfYnk9JnBfZ3JpZHNvcnQ9%20%5CJnBfcm93X2NudD02NTQmcF9wYWdlPTE%2A&p_li=
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16142
- http://secunia.com/advisories/11606
- http://www.osvdb.org/6325
- http://securitytracker.com/alerts/2004/May/1010288.html
- http://marc.info/?l=bugtraq&m=108662876129301&w=2
- http://www.securityfocus.com/bid/10329
More from linksys
View All →CVE-2022-38841
Linksys AX3200 1.1.00 is vulnerable to OS command injection by...
Unknown
0
CVE-2022-38555
Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name....
Critical
9.8
CVE-2022-35572
On Linksys E5350 WiFi Router with firmware version 1.0.00.037 and...
High
7.5
CVE-2022-24372
Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary...
Medium
4.6
CVE-2020-35716
Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to...
High
7.5
Affected Vendor
linksys
View all reports →Affected Software
befcmu10, befn2ps4, befsr11, befsr41, befsr41w, befsr81, befsru31, befsx41, befvp41, rv082, wap55ag, wrt54g
Vulnerable Versions:
1.42.7, 1.40.2, 1.41, 1.42.3, 1.43, 1.43.3, 1.44, 1.35, 1.36, 1.37, 1.38.5, 1.39, 1.45.7, 2.42.7.1, 2.44, 1.43.4, 1.44.3, 1.45.3, 1.39.64, 1.40.3f, 1.40.4, 1.0.7, 2.00.8
Timeline
Official Publish:
June 23rd, 2004
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.